Secure Legal App Development Needed

The project is to build a production-ready mobile application that handles sensitive legal content and must therefore meet stringent security standards. The app will ship on both iOS and Android from a single, maintainable code-base, and I expect full parity in features and polish across the two platforms.

Core features I have already defined:
• User authentication: every action inside the app happens behind a robust sign-in wall, with options for biometric unlock where the OS allows.
• Data encryption: all stored or transmitted data—documents, user profiles, metadata—must be encrypted at rest and in transit using current best-practice algorithms (AES-256, TLS 1.3 or better).
• Legal document management: users will be able to import, view, tag, and search legal documents; edit access is role-based, and a tamper-evident audit trail must log every change.

High-level scope
1. Architecture and code: clean, modular, and documented so an internal team can extend it later. Preferred stacks are Swift/Kotlin or a cross-platform solution such as Flutter or React Native if the final binaries remain fully native in look and feel.
2. Security first: I will request a basic penetration test report or equivalent evidence that common vulnerabilities (OWASP Mobile Top 10) have been mitigated.
3. Compliance: the app should be structured so it can pass Apple App Store and Google Play review without legal or privacy concerns.
4. Handoff: provide the compiled apps, all project files (source code, assets, build scripts), and a short deployment guide.

Acceptance criteria
• Both builds install and run without crashes on current OS versions back to iOS 15 and Android 10.
• A test document uploaded on one device appears, fully encrypted, on a second device after authentication.
• Audit trail entries display exactly who performed which action and when, with no gaps.
• All text strings and legal disclaimers are editable from a single JSON or localization file.

I will be available for quick feedback loops on design, workflow, and legal copy, and I expect transparent progress updates so we can keep development agile and efficient.